Tt-Rss Tiny Tiny Rss
6 CVEs affecting Tt-Rss Tiny Tiny Rss. Latest disclosed: 2021-03-13. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-25787 | Critical | 9.8 | 2020-09-19 | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting them. |
CVE-2017-16896 | Critical | 9.8 | 2017-11-20 | A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter. |
CVE-2020-25788 | High | 8.1 | 2020-09-19 | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["url"] in an error mes… |
CVE-2021-28373 | High | 7.5 | 2021-03-13 | The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this iss… |
CVE-2020-25789 | Medium | 6.1 | 2020-09-19 | An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document. |
CVE-2017-1000035 | Medium | 6.1 | 2017-07-17 | Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack |